Privacy Policy

Visitors can send a private suggestion on the homepage or a card page. We collect the message, name and email address, plus an optional mobile number if provided, to review and respond to the message. Messages are not posted publicly. The site operator can delete messages from the admin inbox. Please do not submit card numbers, OTPs, passwords or banking account details.

Accounts and saved cards

Email/password accounts store your email address, a salted password hash, email verification date, saved card-variant names and account creation date. Your profile stores your name and, only if you provide them, your city, card interests, mobile number, annual-income range and profile photo. Mobile numbers are not verified by SMS. Income is self-reported profile information and is not used to decide lending eligibility or approval. Uploaded photos are cropped, re-encoded and stored privately; they are displayed only in your authenticated account. You can change or remove your photo and clear optional profile details. We send transactional verification and password-recovery codes through our hosting/email provider. Codes expire after 10 minutes, are stored as hashes and have limited attempts; expired code records are removed when the verification service runs. Session cookies support sign-in and protect forms. Temporary hashed abuse-prevention identifiers limit repeated sign-in and signup attempts. Google sign-in is not currently offered in the account interface.

We do not need your card number, PIN, CVV or expiry date. Use our Contact form to request access to, correction of or deletion of your account data. We retain account information while the account is in use or until a deletion request is handled, subject to necessary security and legal retention.

Browser storage and links

The standalone Save feature stores card and article bookmarks in this browser; remove them from Saved at any time. Comparison uses session storage. Card-finder choices appear in the page address when results are shown; its Share button shares card IDs without spending answers. Hosting may process server logs such as IP address, browser details and requested pages to operate and protect the site. Application partners and external sites apply their own privacy policies.

Advertising choices

Google advertising code is not currently integrated. If Google ads are enabled, third-party vendors including Google may use cookies to serve ads based on earlier visits to this and other websites. Google advertising cookies may enable Google and its partners to personalise ads across sites. You can manage personalised advertising at Google My Ad Center and some other vendors at YourAdChoices. Advertising providers and any required consent controls must be disclosed and configured before ads are activated.

For privacy questions, email contact@carddecode.com. See also our Cookies & Local Storage page.